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A code which is to be used for error control on a reed data system is neces- 
sarily restricted by the nature of the transmitting equipment. These restric- 
tions have no connection with the primary function of the code; indeed, 
they frequently eliminate most of the codes about which anything is known 
at present. 

For example, the code to be used for error control by detection and retrans- 
mission on the trunks between data switching centers is required to be a 
cyclic (or truncated cyclic) code with 744 information places and 20 parity 
check bits. The computational problem in this case is to locate those cyclic 
codes which have exactly 20 parity checks and a block length of 764 or 
greater, and pick the one which is best suited for error control over a particu- 
lar channel. 

This paper outlines a procedure for attacking such problems. It describes 
how to locate the cyclic codes with a fixed block length and a fixed number of 
parity checks, if any such exist, and gives some methods of finding the 
number of code words of each weight in a particular code. If one knows the 
statistics of the channel it is then possible to estimate the error control proper- 
lies of the code. 

The procedure depends on an analysis of the algebraic structure of cyclic 
codes, which is given in Section II of this paper. Section I contains slep-by- 
step instructions with no mathematical justification. It is hoped that the 
theory presented in Section II may be useful in other applications. 

INTRODUCTION 

In this paper the word alphabet denotes a systematic code — one in 
which each code word contains a certain fixed number, k, of information 
places, the contents of which are arbitrary, and a fixed number, n — k, 
of parity check places. Each parity check digit is the sum of the contents 
of a particular subset of the information places. The number n is called 
the block length of the alphabet. The individual members of the alphabet 
are called letters. 
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It is well known 1 that the letters of an alphabet of block length n form 
a subspace of the vector space of all possible rows of n binary symbols. 
This large space is denoted by V", V being the field 0, 1. The number of 
information places, k, is also the dimension of the subspace occupied by 
the alphabet. 1 A cyclic alphabet has the additional property that, if it 
contains a letter a, it contains as well every vector of V" which is a cyclic 
permutation of a. 

Cyclic alphabets are popular for error control for several good reasons. 
First, it is easy and relatively inexpensive to encode a cyclic alphabet. 
Second, the "best" known alphabets are cyclic alphabets. Third, 
the cyclic property introduces a great deal of algebraic structure, which 
may be used to predict the error-detecting properties of the alphabet 
and to find alphabets with appropriate properties. 

An alphabet to be used in a data transmission system must satisfy 
certain requirements. There will certainly be restrictions on the size of 
n and k, and one naturally requires also that the alphabet should be of 
some use for error control. These restrictions cannot be completely ar- 
bitrary; for a given pair of integers n, k there is likely to be no cyclic 
alphabet at all, let alone one with desirable error control properties. 

The Hamming distance between two vectors is the number of coordi- 
nate places in which they differ. The distance between v\ and v 2 is thus the 
minimum number of changes one would have to make in Vi in order to 
convert it into v 2 . The usual strategy for choosing an alphabet is to place 
its members as far apart as possible in terms of the Hamming distance. 
It would then require a relatively large number of errors to change a let- 
ter of the alphabet into another letter of the same alphabet. 

The weight of a vector of V" is its distance from the origin, which is 
the same as the number of ones it contains. Let a, of weight s, be a letter 
of an alphabet a. If is another letter of a, so also is a + P, since & 
is a vector space; a + /3 is at distance s from /3. Let A(s) denote the 
number of letters of a of weight s. A (s) is then the number of letters of 
Cfc which are at distance s from an arbitrary letter of &. 

The set of numbers A(0), • • • , A(n) is called the spectrum of Cfc. 
The spectrum of a, combined with the statistics of the channel, may be 
used to obtain an approximate estimate of the error control performance 
of the alphabet. 

An alphabet used for error detection will fail to detect an error pattern 
which is itself a letter of the alphabet. If A{i) = 0, the alphabet will 



* The reason for this is very possibly that no other class of alphabets has been 
so systematically studied. 






BINARY CYCLIC ALPHABETS 305 

detect all ( . J patterns of i errors in a block of length n. If A(i) ^ 0, 

the alphabet will fail to detect A(i) of these ( . 1 patterns. It is usual 

to require that A(l) and A (2) should be zero; it can be seen from anal- 
ysis of the available data that this makes good sense even on the tele- 
phone network. For larger values of i it would be fortunate if the letters 
of weight i were not the same as the most common error pattern, which 
is usually assumed to be a "burst." This assumption leads to the vaguely 
formulated requirement that letters of small weight should have their 
nonzero digits spread out as much as possible. A cyclic alphabet satisfies 
this requirement to a certain extent, since the letters of smallest weight 
must spread over at least n — k -\- \ adjacent places. 

Since it may actually become necessary to choose particular alphabets 
for error control purposes, and since that the requirements which these 
alphabets will have to satisfy are not yet known, it is desirable to be able 
to obtain some rather detailed information about available alphabets. 
This paper describes a computer-assisted procedure by which one may 
locate the cyclic alphabets which have values of n and k within certain 
bounds, and find the spectra of these alphabets. A considerable library 
of computer programs which are useful in this procedure has been de- 
veloped. 

The plan of the paper is as follows: 

Section I contains step-by-step instructions for locating cyclic alpha- 
bets and finding their spectra. 

Section II contains the mathematical justification for the procedures 
of Section I, and is in fact a fairly complete account of the structure of 
cyclic alphabets. 

It is not necessary to read Section II in order to follow the recipes 
given in Section I. However, in a troublesome case — which means a case 
that involves a large expenditure of computer time — the material in 
Section II may suggest a way out of the difficulty. 

I. PROPERTIES OF CYCLIC ALPHABETS 

In this section we outline a procedure to attack the following problem: 
Given that the block length, n, and the number of parity checks, m, 
of a binary cyclic alphabet are required to lie in the ranges 

Ni g n ^ JV 2 , Mi ^ m ^ M 2 , 

find the alphabet (or alphabets) which have the greatest minimum dis- 
tance. 
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It is assumed throughout that n is an odd number. Many of the prop- 
ositions quoted in this section, and justified in Section II, are not true 
for even values of n. 

Let 6i n be the ring of polynomials mod x" — 1 over the binary field. 
(R„ consists of all polynomials of degree ^ n — 1 with coefficients in the 
binary field. Addition of polynomials is done as usual; to multiply two 
polynomials, we multiply in the normal way and then reduce exponents 
of x mod n. 

A cyclic alphabet of block length n may be regarded as a set a of 
polynomials of (R„ , with the property that every polynomial of a is 
divisible (mod x n — 1) by a fixed polynomial a(x). a(x) may, and will, 
be taken to be a factor of a;" — 1 ; then the number of parity checks for 
Ct is the degree of a(x). a{x) will be called the generating factor of &. 
We write a = (R n -a(x). 

Let co stand for one of the numbers 0, 1, • • • , n — 1. Denote by 2 2 (n) 
the permutation w — > 2co mod n. Z 2 (w) divides the integers 0,1, ■ ■ • , 
n — 1 into a number of disjoint cycles; the cycles of 2 2 (63), for example, 
are shown in Table I. 

Let fo(x), fi(x), • • • , ft-i(x) be the irreducible factors of x" — 1. 
Since n is odd, these factors are all distinct. Let f be a primitive nth root 
of unity. The cycles of S 2 (w) and the polynomials fi(x) are associated 
in the following way: The zeros of ft(x) in a suitable* extension field of 
the binary field are f ri , f 2 , • • • , f r *, where (n , r 2 , • • • , r k ) is a cycle of 
S 2 (n) ; and each cycle represents in this way the zeros of one of the/,(:c). 
The number of irreducible factors of x n — 1 is, of course, the same as 
the number of cycles of 2 2 (n). We say that the polynomial /,( x) with 
zeros f l , f r2 , • • • , f k is associated with the cycle (n , r 2 , • • ■ , r k ). 

Let Sbea set of cycles of 2 2 (w) ; let /»-, , • • • , /,- r be the irreducible 
factors of x" — 1 which are associated with the cycles of S. Let 

a(x) =Mx)-f ia (x) f tr (x) 

be the generating factors of an alphabet &. We say that the cyclic alpha- 
bet (X = (R n -a(x) is associated with the set S. 

Let 1 < n < r 2 < • • • < n be a list of the factors of n. Attach to 
each cycle of S 2 (w) an exponent e,- = n/r { defined by the property that 
each member of the cycle is divisible by r,- mod n, and that r,- is the 
largest factor of n for which this is true. 

A great deal of information about the cyclic alphabets of block length 
n can be obtained by looking at the cycles of S 2 (n). 

* For example, the Galois field of order 2', consisting of the roots of y n = y, 
where t is the length of the cycle of S 2 (n) which contains 1. A proof of this "well- 
known" correspondence is given in Section II. 
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Proposition I: Let j?o , m , ■ ■ • , Vt-i be the cycles of 2 2 (w) and let m,- 
be the length of in . The number* of cyclic alphabets of block length n is 2 l . 
The alphabet associated with a set S of cycles has m = 5Z,,- € s mi parity 
checks. 

Proposition II: Let e be the least common multiple of the exponents of 
the cycles contained in S. If e < n the alphabet associated with S has mini- 
mum distance 2. If e = n the minimum distance of the alphabet is at least 
3. 

. Proposition III (Bose-Chaudhuri Bound): // S contains the numbers 
1, 2, 3, • • • , d — 1, d among its cycles, the minimum distance of the alpha- 
bet associated with S is ^ d + 1 . 

It should be noted that the minimum distance may be, and often is, 
larger than the lower bounds given in propositions 2 and 3. 

At this point one may, of course, be forced to conclude that there are 
no satisfactory cyclic alphabets of block length n. The main purpose of 
propositions 1 and 2 is to eliminate useless values of n. Suppose, however, 
that we have a value of n for which there exist alphabets with the re- 
quired number of parity checks and of minimum distance at least 3. It 
is then useful to establish a 1-1 correspondence between the cycles of 
2 2 (n) and the irreducible factors of .r" — 1. 

The exponent of a polynomial /(.r) is the least value of e for which 
/(.r) divides x" — 1. We find the irreducible factors of .r" — l,t and of 
.(•'' — 1, (d = n/a,) for each factor o, of n. Some of the irreducible fac- 



* This number includes three "trivial" alphabets: the alphabet consisting of 
all of (R„ , the alphabet containing only zero, and the alphabet containing only 
zero and the vector of weight n. 

t This has, in fact, been done for all odd values of n S 1023. 
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tors of x n — 1 have exponent e,- ; these appear among the irreducible 
factors of x" i — 1, and can be identified by inspection. 

Any irreducible factor of x n — 1 which has exponent n can be chosen 
to correspond to the cycle of 2 2 (n) which contains 1. Let fi(x) be this 
polynomial; /i(.r) has f as a zero. If r is a proper factor of n, r is the least 
member of a cycle of exponent e = n/r. The polynomial associated with 
this cycle also has exponent e. Let g\ , g 2 , ■ ■ • , g, be the irreducible fac- 
tors of x n — 1 with exponent e. By picking fi(x) to correspond to the 
cycle containing 1, we have implicitly chosen which of the <7,(.t) corre- 
sponds to the cycle containing r. The choice can be made explicit in the 
following way: 

Proposition IV: gi(x r ) is exactly divisible by /i(.r) if and only if it 
corresponds to the cycle containing r. 

We can now assign to each factor r, of n an irreducible factor /,• of 
x" — 1, which will have exponent e { = n/ri . We have not yet matched 
every cycle of 2 2 (n) with an irreducible factor of x" — 1; the remaining 
work will be done by a different method. Before describing this we il- 
lustrate the procedure so far. 

Suppose that the restrictions on n, m are 52 ^ n ^ 64, m = 9. It is 
found that 

Si (53) has two cycles, lengths 1, 52 

S 2 (55) has five cycles, lengths 1, 4, 10, 20, 20 

S 2 (57) has five cycles, lengths 1, 2, 18, 18, 18 

S 2 (59) has two cycles, lengths 1, 58 

2 2 (fil) has two cycles, lengths 1, 60 

S 2 (63) has thirteen cycles, lengths 1, 2, 3, and 6. 

By Proposition I, 63 is the only possible block length, since the lengths 
of the cycles of the other numbers do not add up to nine. The factors of 
63 are 3, 7, 9, 21. The cycles of S 2 (63) and their exponents are shown in 
Table I. The nine parity checks are obtained by taking a cycle of length 
6 and a cycle of length 3 or a cycle of length 6 and the cycles of length 
2 and 1. By Proposition II, the least common multiple of the exponents 
of the cycles should be 63; hence the cycle of length 6 should have ex- 
ponent 63 or 9.f The Bose-Chaudhuri bound provides no information; a 
minimum distance of three is guaranteed by Proposition II, and we can- 
not assemble a collection of cycles containing the numbers 1, 2, 3 with 
only nine parity checks. Hence we are faced with the possibility of hav- 
ing to compute the spectra of 18 different alphabets. (It will be shown 
later that this is not necessary.) 

* This elegant and time-saving device was suggested by Mr. R. L. Graham. 
t This case will be omitted because the author did not notice it in time. 
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Suppose that m is allowed to be 12; we pick the first and second cycles, 
because Proposition III then guarantees a minimum distance of at least 
five. 

Table II contains a list of irreducible factors of x — 1 and their ex- 
ponents. Associate the first polynomial (714) with the first cycle. One of 
the polynomials of exponent 21 then corresponds to the second cycle; 
by Proposition IV we find that 534 is the correct choice. For the sake of 
completeness we use Proposition IV again to ascertain that the poly- 



Table II — Irreducible Factors 
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The polynomials are in octal, which stands for a binary number denoting the 
positions of the nonzero coefficients. The least exponent is on the left, e.g. 

714 = 111001100 = 1 + x + x 2 + x 5 + x 6 . 



nomial (>40 corresponds to the cycle beginning with 9. The unique poly- 
nomials of exponent 9 and 3 must, of course, correspond to the cycles 
beginning with 7 and 21. 

To explain the next steps it is necessary to introduce some more defini- 
tions. 

Let q be an integer prime to n. The mapping a q : x 3 — >x qj (exponents 
mod n) is an automorphism of (R„ . The effect of <r g on a cyclic alphabet 
is to change it into an equivalent 1 cyclic alphabet; &a q = ft , and ft, a 
have the same spectrum. The number of a„ which have a different ef- 
fect on a is rather small; if qi , qi are in the same cycle of 2 2 (n), then 

Cta,,, = 0La qi . 

(In particular if q is in the cycle which contains 1, Qo q = Q.) 



* It is not established mathematically that a different choice cannot give a 
greater minimum distance. To be completely safe we should calculate the spectra 
of all alphabets with 12 parity checks and exp nent 63. 
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Wo select one q out of each cycle of S 2 (n) which contains numbers 
prime to n. For n = 63 we choose the numbers underlined in Table I; 
this choice is computationally advantageous, since 5 2 = 25 mod 63, 
5 = 62 mod 63, 5 4 = 58 mod 63, 5° = 38 mod 63. 

Every cyclic alphabet of d contains a unique polynomial c(x), the 
idempotent of G, which has the useful property that Cfccr 9 = o! if and only 
if c(x)<r q = c (x). For computational purposes it is much better to know 
the idempotent of G, than the generating factor of a. The idempotent of 
the alphabet (R„-/,(.r), where /,(.r) is an irreducible factor of x" — 1, is 
denoted by 1 + 0,-(s). The polynomials 0,-(s), i = 1, 0, ■ ■ • , t — 1 are 
called the primitive idempotents of (ft,, , and have several useful proper- 
ties: 

(i) The Oi(x) are easy to compute, and in fact have been computed 
for all odd values of n ^ 1023. (The method by which this is done is 
described in the next section.) 

(it) The idempotent of the alphabet with generating factor 
/<»(*) /%(*) fi T {x) is 

i + Ms) + M*) + ••• +;M*)- 

(itt) The 9i(k) are permuted among themselves by the automorphisms 
tr 9 . 

The alphabet with idempotent 0,(.c) is a minimal alphabet of (ft,, ( t 
contains no subalphabet except 0). Its generating factor is (x" — 1)/ 
fi(x). The alphabet with generating factor /<(s) has generating idem- 
potent 1 + 8i(x) and is a maximal alphabet of (ft,, . 

In the future the cyclic alphabet G. will be identified by a sum of primi- 
tive idempotents of (R„ rather than by a product of irreducible factors of 
x — 1. 

Proposition V: Iffi(x), f-i(x) are irreducible factors of x" — 1 with the 
same exponent, then di(x)ff g = 6z(x) for some automorphism a„ of R n . 
Hence the minimal alphabets generated by 8\(x), Oz(x) are equivalent, and 
the maximal alphabets generated by 1 -f- 0i(.r), 1 + d*(x) are also equiva- 
lent. Conversely, if two minimal (maximal) alphabets have the same spec- 
trum, they are equivalent under one of the automorphisms <r a . 

Proposition VI: The alphabet with idempotent (1 -\- d% L -\- ■ ■ ■ + 0, r ) 
is equivalent to the alphabet with idempotent (1 + 0;,o- g + ■ • • + 8i T 9 q ). 

Proposition VII: Let 1 + 0,(.r) be the idempotent associated with the 
cycle of 2 2 (n) which contains 1. Let u, v be integers prime to n such that 
u-v = 1 mod n. Then 1 + di(x)tr u is the idempotent associated with the cycle 
which contains v. 

We illustrate again for the case n — 63. Table III contains a list of 
primitive idempotents of (Res ■ This list is parallel to the list in Table II. 
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Table III — Primitive Idempotents of (Re3 
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From Table II 


From Prop. 6 


01 


321026251170 
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0, 
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7, 14, 28, 35, 49 


56 




Oh 


331327363052 


375016044 






22, 29, 43, 46, 53, 58 


0i 


323112032311 


203231120 






15, 30, 39, 51, 57, 60 


0io 


375263355116 


136243020 






13, 19, 26, 38, 41, 52 


Ou 


777777777777 


777777777 











456271345627 


134562713 






27, 45, 54 


011 


723516472351 


647235164 


9, 18, 36 







The tth factor, f t (x) of Table II, is the generating factor of the alphabet 
with idempotent 1 + 0,(.r) where 0,O) is the ith primitive idempotent 
of Table III. We associate some of the 0, with a cycle of 2 2 (63) by copy- 
ing from Table II. 

The automorphism a 6 produces the following permutation of the set of 

primitive idempotents of 0te3 

(01 , 010 , 08 , 06 , 02 , 04) (06 , 09 ) (012 , 013 )(*») W (M- 

The other automorphisms, as already noted, produce powers of this 
permutation; for example a 6 -> = o b 3 gives 

(01 , 06) (010 , 02) (08 , 04) (05 , 9 ) (012 , M (0 3 ) (0 7 ) (01l). 

Consider now the alphabet with nine parity checks which is associated 
with the cycles (1, 2, 4, 8, 16, 32) and (9, 18, 36). By Table II the gener- 
ating factor of this alphabet is fi(x)-f u (x); its idempotent is (1 + 
0, _|_ 13 ). The idempotents which can be obtained from this by the per- 
mutations <r 5 and its powers are 

1 + 010 + 012 , 1 + 08 + 013 , 1 + 06 + 012 , 1 + 02 + 013 , 1 + 04 + 012 _ 

The generating factors of the corresponding alphabets are (including the 
original alphabet), 

fvfn , /io-/i2 , /s-/i3 , /e-/i2 , /2-/i3 , /r/12 • 

By Proposition VI these six alphabets are all equivalent. Similarly, the 
alphabet associated with cycles (1, 2, 4, 8, 16, 32) and (27, 45, 54) has 
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idempotent 1 + 0i + 12 , and is equivalent to the alphabets with idem- 
potents 

1 + 0io + On , 1 + 08 + 012 , 1 + 00 + 013 , 1 + 02 + 012 , 1 + 04 + 013 . 

The third possibility for nine parity checks consists of the cycles (1, 2, 4, 
16, 32), (21, 42), (0). The associated idempotent is 1 + X + 3 + n ; 
equivalent alphabets are given by the idempotents 

1 + 010 + 03 + 011 , 1 + 08 + 03 + 011 , 1 + 06 + 03 + 011 , 

1 + 02 + 03 + 011 , 1 + 04 + 03 + 011 • 

Hence, among the 18 alphabets with nine parity checks and minimum 
distance ^ 3, there are actually at most three different spectra. 

We observed before that the alphabet with twelve parity checks as- 
sociated with cycles (1, 2, 4, 8, 16, 32) and (3, 6, 12, 24, 33, 34) has 
minimum distance at least 5. The idempotent of this alphabet is 1 -f- 0i + 
05 . There are at least five equivalent alphabets with idempotents 

1 + 010 + 09 , 1 + 08 + 05 , 1 + 06 + 09 , 1 + 02 + 05 , 1 + 04 + & • 

It may very well happen that one of these alphabets is easier to instru- 
ment than our original choice. 

The 1-1 correspondence between cycles of S 2 (63) and primitive idem- 
potents of (R 6 3 is completed by Proposition VII, and entered in Table IV. 
For example, 5-38 = 190 = 1 mod 63 (38 = 5 mod 63); hence 

01<T6 = 010 

corresponds to the cycle (13, 19, 26, 38, 41, 52). 

It is now necessary to face the problem of actually computing the spec- 
trum of a cyclic alphabet. 

For a small alphabet this can be done by counting, without too large 
an expenditure of computer time. An alphabet of block length 765 with 
2 20 letters can be examined, a letter at a time, in 0.32 hours on a 7094. 
This alphabet has 745 parity checks. Typically, however, one wishes to 
know the spectrum of the alphabet with 2 74B letters and 20 parity checks; 
to compute this by counting would take over a million computer years. 
Fortunately there is a way out of this dilemma. 

Let a(x), of degree m, be a factor of x n — 1, and let 

b(x) = (x n - l)/a(x). 

* It is entirely possible that alphabets not contained in this list also have the 
same spectrum, and are perhaps equivalent to the first alphabet under a permuta- 
tion which is not an automorphism of (ft„ . 
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Table IV — Spectra of Small Alphabets of R 63 



fli + flu 29 letters 



B(0) = 1 

£(28) = 189 
£(32) = 252 
£(36) = 7 
£(40) = 63 



fli + flu 2» letters 



5(0) = 1 
5(28) = 252 
£(32) = 63 
£(36) = 196 



fli + fli + flu 29 letters 



£(0) = 1 
£(25) = 3 
£(26) = 63 
£(29) = 126 
£(31) = 63 
£(32) = 63 
£(34) = 126 
£(37) = 63 
£(42) = 3 
£(63) = 1 



fli + 0s 2" letters 



£(0) = 1 
£(24) = 210 
£(28) = 1512 
£(32) = 1071 
£(36) = 1176 
£(40) = 126 



The alphabets a = (R n -a(x) and 03 = (R„-&0) are called dual or or- 
thogonal alphabets.* Let A(s), B(s) be the number of letters of weight 
s in a, (B. We suppose that G. with m parity checks is a large alphabet, 
whose spectrum we wish to find; (B contains 2 m letters, and its spectrum 
can be found by counting or by more sophisticated procedures. The 
A(s) can be found from the B(s) by the following proposition. 3 

Proposition VIII: The quantities A(s), B(s) are related by the expres- 
sion 

2 ra E A(«y = t,B(8) (1 + z)"- 8 (l - z)°. 



* This is not quite the usual definition; the usual dual alphabet of d is equiva- 
lent to (B, so has the same spectrum. The difference is explained fully in Section II. 
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We now describe methods which are sometimes useful for finding the 
spectra of small cyclic alphabets. 

Let a be a letter of a cyclic alphabet Cfc, and let aT be the letter ob- 
tained from a by one cyclic permutation to the right. For example, for 
n = 7 one might have 

a = (0 1 1 1 1 1), aT = (1 1 1 1 1), 

aT 2 = (1 1 1 1 1) etc. 

The letters aT" all belong to Cfc. The set of distinct letters aT" for fixed a 
is called a cycle of Cfc; a is a representative of this cycle; the number of 
distinct letters is ir(a), the period of a or the length of the cycle. Know- 
ing the length of each cycle of Cfc and the weight of a letter from each 
cycle, we can at once compute the spectrum of Cfc. 

If Cfc, (B are dual alphabets, and the idempotent of Cfc is 1 + c(x), then 
c(x) is the idempotent of (B. The alphabet 3Tlj with idempotent 6i(x) is 
the dual of the maximal alphabet with irreducible generating factor 
fi(x). 3TC, is called a minimal alphabet. The alphabet with generating 
factor fi(x)fj(x) has idempotent 1 + 0,(x) + dj(x); its dual alphabet 
is the union of 3TC t - and 3Hy and has idempotent 6i(x) + 8j(x). The pro- 
cedure is to find cycle representatives for the 3TC» and then put them to- 
gether to get cycle representatives for 9TCf U 3TC/ . This is done by the fol- 
lowing propositions. 

Proposition IX: Every cycle (except that containing the zero letter) of 
9TC,- has length ir ( 6 »•); further x(0,) is the exponent, e,- , of the irreducible 
polynomial fi(x). 

For example, for n = 63, 9Tli has one cycle of length 63. This cycle 
contains the letter corresponding to 6\(x), which has weight 32; the 
spectrum of Dili is B(0) = 1, 5(32) = 63. The spectrum of the maxi- 
mal alphabet (R 6 r fi{x) is given by 

2 B E A(s)z' = (1 + z) 63 + 63(1 + z) 3 \l - zf\ 

8=0 

Similarly 9TZi 2 has one cycle of length 7 which contains the letter cor- 
responding to n (x), of weight 36. The spectrum of 9TZi 2 is B(0) = 1, 
5(36) = 7, and the dual alphabet Oi^-fnix) has the spectrum A(s) 
given by 

2 3 T,A(s)z' = (1 + z) 63 + 7(1 + zf(l - zf\ 

8=0 

We note that 
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8A<2) = ( 6 2 3 ) + 7 [g 7 )- 27-36 + (»)]- 2016, 

agreeing with the statement of Proposition II that this particular alpha- 
bet will contain letters of weight 2. 

The alphabet 3Hs contains three cycles of length 21. It is possible to 
check by hand that 6 , S + 0b T and 5 + B 6 T 2 are in different cycles; 
their weights are 24, 36 and 36, respectively; the spectrum of 9Tl 6 is 
23(0) = 1,5(24) = 21,5(36) = 42. 

The technique is useful only if 3TI,- contains a rather small number of 
different cycles; otherwise the process of finding cycle representatives 
becomes extremely laborious. 

Once the cycle representatives for 3TC,- and 9TC,- are known, one con- 
structs cycle representatives for the alphabet 9TC< U 9lly (with idem- 
potent 0,- + 9j) by the following proposition. 

Proposition X: Let 3TC,- have cycle representatives mi , m% , • • • , m a , of 
period e, , and 9TC/ have cycle representatives rii , w 2 , ■ • • , n$ , of period 
6j . Let H, h be the least common multiple and highest common factor of 
d , ej . Then 9TI,- U SM,- has cycle representatives mi, • • • , m a , n t , • • • , 
rap , and in addition, for each pair i, j, cycle representatives m,- + n-jT', 
v — 0, 1, • • • , h — 1 of period H. 

For example, for n = 63 the alphabet 9Jli U 9TC 12 has one cycle represent- 
ative 0i (period 63), one cycle representative i2 (period 7), and 7 cycle 
representatives B\ + n T\ v = 0, 1, • • • , 6 of period 63. The alphabet 
91Zi U iTHi3 is constructed similarly. The spectrum of the alphabet 

3Tli U 9R 3 U 3Tl„ 

is obtained by constructing that of 9Tli U 9TC 3 (cycle representatives 0] , 
0:i , 0i + 03 , 0i + 03^) and adding the letter of weight 63 represented by 
U . The spectra of these three alphabets and then- duals are given in 
Tables IV and V. The dual alphabets are the three nonequivalent alpha- 
bets of block length 63 and with nine parity checks which we set out to 
find. 

The alphabet 3Tli U 9TC 5 has cycle representatives 0i , period 63, 6 , 
06 + e b T, 5 + 6 7' 2 , period 21, and X + 6 b T v , 6, + (0 6 + O h T)T, 
0i + (06 + BiT 2 )T, v = 0, 1, ■ • • , 20. The spectra of this alphabet and 
its dual are given in Tables IV and V; the dual alphabet has minimum 
distance 5 as predicted. 

We now give a summary of the procedure : 

(1) Obtain a list of the cycles of 2 2 (n) for each allowable value of n, 
and check to see whether an allowable number of parity checks can be 
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Table V — Spectral Probabilities* of Large Alphabets of Rm 

1 + 0i + flu (9 parity checks) 

a(0) = 1 = a(63) 

a(l) = a(2) = a(3) = 0; 

a (4) = 0.21153 X IO" 2 , 

a(5) = 0.20973 X IO" 2 , 

a(6) = 0.19243 X 10~ 2 , 

a(7) = 0.19571 X 10~ 2 , 

a (8) = 0.19526 X 10~ 2 , 

a(s) = a(n — s) 

a(s) = 2~ 9 for other values of s. 

1 + 0i + fin (9 parity checks) 

a(0) = 1 = a(63) 

a(l) = o(2) = 

a (3) = a (4) = 0.15865 X IO" 2 , 

a (5) = a (6) = 0.20077 X 10~ 2 , 

a(7) = a(8) = 0.19451 X 10" 2 , 

a(9) = o(10) = 0.19544 X IO -2 , 

a(ll) = a(12) = 0.19528 X IO" 2 , 

a(s) = a(n — s) 

a(s) = 2~ 9 for other values of s. 

1 + fii + fli +6n (9 parity checks) 

a(0) = 1 

a(l) = a(2) = a(3) = 0, 
a(4) = 0.19634 X 10" 2 
o(6) = 0.19626 X 10~ 2 
a (8) = 0.19502 X 10" 2 
a(i) = all odd values of i 
a(2i) = 2~ 9 other values of i. 

I + 0i + fls (12 parity checks) 



a(0) 


= 


1 a(63) = 1 






a(l) 


= 


a(2) 


= a(3) = 


a(4) 0. 


a(5) 


= 


a(6) 


= 0.26889 


X 


io- 3 , 


a(7) 


= 


a(8) 


= 0.24119 


X 


io- 3 , 


a(9) 


= 


a(10) 


= 0.24461 


X 


io- 3 , 


a(ll) 


= 


a(12) 


= 0.24404 


X 


10~ 3 , 


a(13) 


= 


ol4) 


= 0.24416 


X 


io- 3 , 


ats) 


= 


a(n — 


s) 






a(s) 


= 


2~ 12 other values of 


8. 



* The spectral probability a(s) is A(s)/( n ); the number A(s) is frequently 
too large for the computer. 

obtained as the sum of lengths of distinct cycles. Discard the values of 
n for which this is not possible. 

(2) Attach an exponent to each cycle of 1>2{n). 

Let Sbe a set of cycles of suitable lengths. Find the least common 
multiple of the exponents of the cycles in S. Discard the sets S for which 
this number is less than n. 
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(3) It is now necessary to set up a correspondence between the cycles 
of S and the primitive idempotents of (R„ . This is done in two steps, as fol- 
lows. Obtain a list of the irreducible factors of x n — 1, and of x e< — 1, 
e,- = n/fi for each proper factor n of n. Let fo(x), fi(x), • • • , ft-i(x) 
be the irreducible factors of x" — 1. The irreducible factors of x H — 1 
will be among the/,- (a;). Starting with the smallest value of e* , attach an 
exponent to each of the /,-(.r) by comparing lists. Pick any fi(x) of ex- 
ponent n to correspond to the cycle beginning with 1, and using Proposi- 
tion IV, find the polynomial of exponent e,- , which then corresponds to 
the cycle beginning with r,- . 

(4) Obtain a parallel list of primitive idempotents of (R„ , and trans- 
fer to this the cycles whose position in the correspondence has been 
found. Pick an integer q from each cycle of S 2 (ti) which contains num- 
bers prime to n, and find the effect of the permutation <r 9 on the set of 
primitive idempotents. Use Proposition VII to complete the correspond- 
ence between cycles and primitive idempotents. 

(5) Let Si, St, • • • , s„ be the cycles of an allowable set *S, fi(x), • • • , 
/„(a?) the corresponding irreducible factors of x n — 1, and di(x), • • • , 
6 v (x), the corresponding primitive idempotents. The desired alphabet 
has the generating factor f(x) = fi(x)f 2 (x) • • • f,(x). The orthogonal 
alphabet has the generating idempotent 

6(x) = di(x) + 2 (x) + ••• + 6,(x). 

Divide the allowable alphabets into automorphism classes by looking at 
the effect of the automorphisms a q on the idempotent 6(x). Alphabets in 
the same automorphism class have the same spectrum. 

(6) The orthogonal alphabet (R„-0(.r) is frequently much smaller 
than the desired alphabet (R„ •/(.?). In this case it is advantageous to 
compute the spectrum of 6i„-d(x) and to obtain the spectrum of (R n -f(x) 
from this by Proposition VIII. If d(x) is the sum of two or three primi- 
tive idempotents, its spectrum may be built up in the way described in 
Proposition X. Otherwise the alphabet may be generated by the vectors 
corresponding to polynomials 8(x), xd(x), • • • , x m 6(x) [m = degree of 
/(*)], and the spectrum obtained by counting. 

II. PROOFS 

In this section we give the proofs of the propositions of the first sec- 
tion. 

Let V be the binary field, and V n the set of all possible rows of n 
binary symbols. V n is a vector space of dimension n over V. Let (R„ be, 
as before, the set of polynomials mod x n — 1 over V. (R„ is a commuta- 
tive ring. 
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We may relate V* and (R n by (1-1) mapping 

olq + a x x + • • • + a„-iX t=> eta , on , • • • , a n -i . 

This mapping clearly preserves addition in both (R„ and V". 
A subset CI of polynomials of (R„ is an ideal if 
(i) 0i , 02 e a => ^i + £ 2 e a, 
(m) g e &=> rg e & for any r e (R„ . 

An ideal in (R„ corresponds by property (i) to a linear subspace of V n . 
By property (it), with ?• = x, this subspace in invariant under a cyclic 
permutation of coordinates, hence is a cyclic alphabet in V n . Conversely 
a cyclic alphabet in V n is an ideal in (R n . We represent both ideal and 
alphabet by the same symbol, Q. 

Lemma 2.0: An ideal 6, of (R„ consists of all multiples (in (R„) of a 
polynomial a(x) which divides x n — 1. a(x) is the unique polynomial of 
least degree in Ct. 

The proof of this lemma can be found in Peterson, section 6.4. 

a(x) will be called the generating factor of Ct. The polynomial b(x) = 
(x n — l)/a(x) will be called the reciprocal factor of a. This notation is 
used throughout; the ideal named GL always has a generating factor 
named a(x) and a reciprocal factor named b(x). The degree of a(x) will 
be denoted by m, and that of b(x) by k; of course m + k = n. 

Lemma 2.1: The dimension of Q, as a vector space of V n is k; the number 
of parity checks for the alphabet a ism. For proof, see Peterson, 4 theorem 

6.11. 

The number of different alphabets of (R„ is the number of different 
factors of x n — 1 ; the dimension of alphabet a is the degree of its recipro- 
cal factor. However, if n is odd, (which we always assume) one can find 
which dimensions are available in block length n without going to the 
considerable trouble of finding all the factors of x n — 1. 

Let a) stand for one of the numbers 0, 1, • • • , n — 1. Let S 2 (w) denote 
the mapping co — * 2w mod n. Since n is odd, this mapping is a permutation 
of the numbers 0, 1, • • ■ , n — 1. 

The permutation S 2 (n) on 0, 1, • • • , n — 1 factors into a number of 
cycles; the cycles of S 2 (63) are shown in Table I, Section I. It is a fairly 
trivial matter to find these cycles. 

The relation between the cycles of 2 2 (w) and the factors of x n — 1 
over V is a well-known part of Galois theory. It is described in detail 
here only because of the difficulty of finding a concise reference. 



* a(x) divides x n — 1 in the ring V[x] of all polynomials over V. It is meaning- 
less to say that something divides x" — 1 in (R„ . 
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Lemma 2.2: Let S be a subset of the integers 0, 1, • • • , n — 1. S is 
invariant under 2 2 (n) if and only if it is the union of a number of cycles 
of S 2 (n). 

Proof: If S is such a union it is invariant under 2 2 (n) , since each separ- 
ate cycle is invariant. 

Suppose S to be invariant under 2 2 (n) and let r belong to S. Then 
2V also belongs to S for any value of v. S contains with r the whole cycle 
containing r. Thus S is a union of cycles of 2 2 (w). 

Lemma 2.8: Let S be invariant under 2 2 (w), and let S t be the set of all 
sums r Sl + r S2 + • • • + r, T , r,,. e S, r H 9^ r., . TVi-en £ T is invariant under 
2 2 (n). 

Proof: We need show only that 2 2 (n) maps & T into itself; the mapping 
must then be 1-1. Let r„ + r, 2 + • • • + r, T e £ T ; applying 2 2 (n) we 
obtain 2r si + 2r„ 2 + • • • + 2r Sr , which is again in S T . Hence the lemma 
is proved. 

Let (1,2,2 2 , ••• , 2"' 1_1 ) be the cycle of 2 2 (n) which contains 1. 
2'" 1 = 1 mod n, or n divides 2"' 1 - 1. Set N = 2 mi - 1. Every nth root 
of unity is also an JVth root of unity. Let V(2" n ) be the Galois field of 
the Nth roots of unity over the prime field V. x" — 1 factors into linear 
factors over V(2" H ) and these factors are of the form x — f", where f is 
a primitive nth root of unity, (f is not a primitive A^th root of unity 
unless n = N.) 

The automorphisms of V(2" n ) over V are given by a — * a and its 
powers, where a eV(2" H ); further, a = a if and only if a e V. b 

The explicit connection between the cycles of 2 2 (n) and the factors 
of x n — 1 is as follows: 

Lemma 2.4:* Let S = n , r 2 , • • • , r m be a set of integers invariant un- 
der 2 2 (n), within ?* 1-j . The polynomial f(x) = tt(x — f r< ) has coefficients 
in V, and is a factor of x" — 1 over V. 

Letf(x) = (x - f ri ) • • • (x - f rm ) be the factorization over V(2 mi ) 
of a polynomial f(x) which divides x" — 1 over V. The set ri , r 2 , ■ • • , r m 
is then invariant under 2 2 (w). 

Proof: Let S = T\ , r 2 , • • ■ , r m be a set of distinct integers which is 
invariant under X 2 (n).f(x) = (x - f') • • • (x - f m ) divides x n - 1 
over V(2 mi ) since each linear factor divides x n — 1, and r t - 9^ r 5 . Let 
a„_ r be the coefficient of x n ~ T inf(x). a„- T is the rth symmetric function 
off 1 , ••• ,? n , or 

Ergj+.-.+rg 
s ,- (S 



* Note again that we are working in V[x], not in (R„ . 
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(a„_ T ) 2 = £f 2r ' 1+ -" +2r " = a„_ r by2.3. 

Thus the coefficients of /(re) are in V, and /(re) divides re" — 1 over V. 

Suppose that fix) divides x n — 1 over V. The zeros of /(re) in V(2 mi ) 
are f ri , f r *, • • • , f rm where f is a primitive nth root of unity, and r x , 
• • • ,r m are integers mod n. Since by Lemma 2.3 all the symmetric func- 
tions of f Tl , f r2 , ■ • • , f r "* are in V, the transformation f — * f 2 preserves 
fix), and must be simply a permutation of the zeros of fix). Thus the 
set ri , r 2 , • • • , r m is invariant under 2 2 (n). 

The smallest sets which are invariant under 2 2 (n) are the individual 
cycles of 2 2 (n). Each such cycle determines, in the way described above, 
the zeros of an irreducible factor of re" — 1; each irreducible factor of 
x n — 1 corresponds in this way to a cycle of 2 2 (n). 

Proof of Proposition I 

The number of cycles of 2 2 (n) is t, and, by the above, t is also the 
number of irreducible factors of re" — 1. These irreducible factors are all 
different [(re" — 1) has no multiple roots over V if n is odd], and can be 
combined by multiplication to give 2 l different factors of re" — 1. Further, 
these are all the factors of re" — 1. Hence there are 2 l cyclic alphabets of 
block length n. Let a (re) = /i (re) • • • /„ (re) be the generating factor of the 
cyclic alphabet &,. Let m» be the degree of /,(rc). m* is the length of the 
cycle of S 2 (w) corresponding to/»(re). By Lemma 2.1 the number of parity 
checks for d is m = 2^, u = i m * • 

The exponent of a polynomial a (re) is the least integer e such that 
a (re) divides re 8 — 1. Let 

a(x) = (re- f 1 ) ■■■ (* - f m ), 

where f is a primitive nth root of unity, and ri , • • • , r m is a set of cycles 
of 2 2 (n). The exponent of afrc) is then the least value of e such that 

(f r, ') e = l, or er» = 1 mod n, i = 1, • • • , m. 

e = n/a where a is the greatest common factor of ri , • • • , r m and n. 

If a (re) is an irreducible factor of re" — 1 [n , • ■ ■ , r m is a single cycle 
of S 2 (n)], the quantity a is the largest factor of n, which divides each 
member of the cycle n , ■ • • , r m . e = n/a is said to be the exponent of 
the cycle as well as of the polynomial a (re). 

The exponent of a union of cycles or of a product of irreducible poly- 
nomials is the least common multiple of their individual exponents. 
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Proof of Proposition II 

The ideal & with generating factor a{x) contains the polynomial 
x e — 1 (= x + 1), where e is the exponent of a(x). If e = n, this poly- 
nomial is the zero of Q; if e < n, it corresponds to a letter of weight 2 
in the alphabet d. 

If a contains a letter of weight 2, the ideal (i contains, by suitable 
cyclic permutation, a polynomial x" — 1, e < n, which is divisible by 
a(x); the exponent of a(x) is then less than n. 

Thus Ct contains letters of weight 2 if and only if its generating factor 
has exponent less than n. 

Proposition III is a restatement of the Bose-Chaudhuri theorem; a 
proof can be found in Peterson, 4 Theorem 9.1. 

There is considerable freedom of choice in setting up an exact cor- 
respondence between cycles of 2 2 (w) and irreducible factors of x" — 1. 
This occurs because there are several primitive nth roots of unity; if f 
is one such, then so also is f ", where v is any integer prime to n. 

We pick any irreducible polynomial of exponent n to correspond to 
the cycle (1, 2, • • • , 2" ,_1 ). If this is to make sense, the alphabets gener- 
ated by irreducible polynomials with the same exponent should be in- 
distinguishable for our purposes. In fact they are equivalent; this will 
be proved later. 

The choice of a polynomial to correspond to the cycle (1, 2, • • • , 
2 m ~ 1 ) implicitly fixes the exact correspondence between cycles of S 2 (n) 
and irreducible factors of x n — 1. It remains to make this correspondence 
explicit, preferably by calculations involving only numbers in the prime 
field V. This is done in two stages, the first of which is given by Proposi- 
tion IV. 

Proof of Proposition IV 

Let fi(x) be the polynomial chosen to correspond to the cycle (1, 2, 
• • • , 2" ,_1 ). Over the field V(2 m ) fr(x) factors into (x - f)(x - f 2 ) • • • 
(x — f m ~ ). Let r be a factor of n and {gi(x)\ the set of irreducible 
factors of x" — 1 of exponent e = n/r. One of the g%{x) has f r as a zero 
over V(2 m ), and corresponds to the cycle containing r. This g%(x) can be 
identified by the following lemma. 

Lemma 2.5: gi(x r ) is divisible by f\(x) over V if and only if Qi{x) has 
f as a zero over F(2'"). 

Proof: Let g(x) be any polynomial of exponent e. Since g(x) divides 
x* — 1 over V, g(x T ) divides x" — 1 = x n — 1. g(x r ) is a product of 
irreducible factors of x n — 1. 
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Let a , ai , • • • , a s _i be the cycle associated with g(x), so that a 
typical factor of g{x) is (x p — f -1 ). The cycle O , ft , ••• , £ m _i is 
associated with g{x) if and only if rfij = a, [(£*;)' = f"'] for a suitable 
choice of i,j. 

Suppose now that gi(x T ) is divisible for fi(x) over V. The cycle 1, 2, 
• • • , 2 m_I is then associated with gi(x r ), and f r = J* 1 for some i; thus 
f r is a zero of Qi(x). 

Suppose that f r is a zero of gt(x). The cycle associated with g%{x) is 
then r, 2r, • ■ • , 2"~ l r. Clearly, 1,2, • • • , 2 m_1 is a cycle associated with 
gi(x r ), and/i(x) divides gt(x r ). 

It may be noted that the proof of this theorem provides a way of find- 
ing the factors of g(x T ) which is useful in other applications. 

Automorphisms and Idempotents of (R„ 

Let q be an integer prime to n, and let a q be the mapping of (R„ onto 
itself defined by h(x) — * h(x q ), exponents reduced mod n where neces- 
sary. a q clearly preserves addition and multiplication in (R„ , and is 1-1, 
since with q prime to n, x xq = x 3q implies iq = jq mod n, implies i = j 
mod n. (T q is an automorphism of (R„ , and &o q is again an ideal. 

In V", ff q is a permutation of coordinate places, described by w — > gw 
mod n [S 2 (n) is the special case <r 2 ]. Thus a q changes alphabets of V" into 
equivalent alphabets, and in particular changes cyclic alphabets into 
equivalent cyclic alphabets. 

The automorphisms a q are useful because it is easy to compute their 
effect on the ideals of fll„ . 

Lemma 2.6:* Every ideal QL of (R„ contains a unique polynomial c(x) 
with the following properties: 

(i) c(x) = c(x) 2 ; c(x) is idempotent 
(ii) a = (R„-c(x); c(x) generates 0L 

(Hi) c(x) is a unit for ft. 

(iv) c{x)a q is the idempotent of &a g . 

Proof: Let a(x), b(x) be the generating factor and reciprocal factor of 
a. Since n is odd, they are relatively prime. There exist polynomials 
hi(x), h*(x) such that h 1 (x)a(x) + h- 2 (x)b(x) = 1, and hi(x), h 2 (x) are 
relatively prime to b(x), a(x), respectively. We show that c(x) = 
hi(x)a(x) is the idempotent of d. 

(i) c{xf + c(x)h 2 (x)b(x) = c(x). The second term on the left is 
zero since it contains the factor x n — 1. Hence c(x) is idempotent. 

* In other words, (R n is a commutative, semisimple ring. It is, of course, the 
group algebra over V of the cyclic group of order n; n odd implies that it is semi- 
simple. 6 



BINARY CYCLIC ALPHABETS 323 

(n) The generating factor of the ideal (R n -c(x) is the highest common 
factor of c(x) and x n - 1. This is a{x) by the construction of c(x). 
Hence (R n -c(x) = 6,. 

(Hi) If a(x) e a, a(x) = a (x)c(x) by (n). Then <x(x)c(x) = 
a(x)c(xf = d(x)c(x) [by (i)} = a(z). Hence c(x) is a unit for a. 
c(x) is then necessarily unique, since the commutative ring d cannot 
have two unities. 

(iv) c(x)a q is idempotent because a q is an automorphism of (R„ , and 
is the unique idempotent of the ideal (R n c(x)a- q = Q,<r q . 

We now associate with each ideal a a third polynomial c(x), the 
generating idempotent of &. 

Corollary 2.7: &a q = Cfc if and only if c(x)<r q = c(x). 

Corollary 2.8: Cto- 2 = & for every ideal a of (R„ ; equivalently, the 
-permutation 2 2 (n) preserves every cyclic alphabet of V n . 

Two vectors (a , «i , • • • , a«-i), (/3o , /Si , • • • , /3 n _i) are said to be 
orthogonal if 

n-l 

X «.-•/?* = (multiplication and addition in V). 

i"=0 

The orthogonal complement (dual alphabet) a -1 " of a consists of the 
vectors of V" which are orthogonal to every vector of a. For our pur- 
poses it is convenient to say that cyclic alphabets a, (S> are orthogonal if 
(B is generated by b(x) = (x n - l)/a(x). This is justified by the follow- 
ing lemma. 

Lemma 2.9: Ct" 1 " is equivalent to the ideal generated by b(x) and is ob- 
tained from it by the transformation x — > x~ . 

The proof of this lemma can be found in Peterson 4 (6.12). 

Lemma 2.10: If (X has idempotent c(x), the ideal (B = <R n -b(x) has 
idempotent 1 + c(x). 

Proof: By 2.6 the idempotent of (B is 

h 2 (x)b(x) = 1 + h(x)a(x) = 1 + c(x). 

Since we have agreed to say that a, (B are orthogonal ideals, we may 
also say that c(x), 1 + c(x) are orthogonal idempo tents. This is fortu- 
nate, since it is a well-established convention in the theory of algebras to 
say that two idempotents are orthogonal if their product is zero. 6 
[c(.r)(l + c(x)) = c(x) + c(x) = 0.] We shall adopt this convention. 
It is to be noted that orthogonality for ideals is still not the same as 
orthogonality for idempotents. The idempotents Ci(x), a(x) are orthog- 
onal if Ci(x)-c 2 (x) = 0. The ideals they generate are not orthogonal 
unless also c x (x) + c 2 (x) = 1. 
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Lemma 2.11: (i) The ideal &i f\ 2 has idempotent C\C 2 . (ii) The ideal 
&i U Ct 2 has idempotent Ci -\- c 2 + C\c 2 . 

Proof: 

(i) &i PI 2 is generated by the least common multiple of ai (x), a 2 (re), 
say d(x). a(x) is the highest common factor of Ci(re)c 2 (re) and x" — 1; 
hence Ci(x)c 2 (x) is the idempotent of the ideal (R„-a(rc). 

(ii) Set d (re) = ci(x) + c 2 (x) + ci(rc)c 2 (re). The d(x)d(x) = Ci(x), 
c 2 (x)d(x) = c 2 (x). Thus d(x) is idempotent, and the ideal (R n d(x) con- 
tains &i and 2 . 

Let G be any ideal which contains tti and 2 , and let c(x) be the 
idempotent of a. Since c(x) is a unit for O, c,(re)c(rc) = d(x), i = 1, 2. 
Then d(x)c(x) = d(x), and (R„rf(.r) is contained in every ideal Q. 
Hence (R„-d(.T) = tti U 2 . 

An ideal of (R„ is said to be a minimal ideal if it contains no subideal 
other than (0). A minimal ideal of 6l„ will be denoted by 3TC,- , its gener- 
ating factor by wi ,-(#), its reciprocal factor by fi(x), and its generating 
idempotent by 6i(x). The idempotent of a minimal ideal is called a 
primitive idempotent. 

Lemma 2.12: 

(i) 31! ,■ is a minimal ideal if and only if fi(x) is an irreducible factor 
ofx n - 1. 

(ii) 9TI,- D 9TC; = Oift 7* j; the dimension of 9E,- U 911 y is £/ie swm 0/ 
£/ie dimensions of 9Ei and 9Ry . 

(m) ilwy ideal O is the union of the minimal ideals continued in O. 
In particular, (R„ is the union of all its minimal ideals. 

Proof: 

(i) follows from 2.1, since the dimension of a minimal ideal is as small 
as possible. 

(ii) The generating factor of the ideal orthogonal to 9E,- D 9TZy is the 
highest common factor of fi(x) and fj(x), which is 1. Hence 9TC,- f\ 9Tly 
is equivalent to (R„' t and is zero. The second statement follows im- 
mediately. 

(iit) Let b(x) be the reciprocal polynomial of O, and let b(x) = 
f\(x)f 2 (x) • • • f,(x) where (since n is odd) the/,- (re) are distinct irreducible 
factors of x n — 1. Q, contains the polynomials (a?" — l)//,(rc), hence 
contains the minimal ideals 9TC,- , i = 1, • • • , v, hence contains their 
union 9TC,- U 9Tl 2 U • • • U 9TC„ . By (ii) the dimension of this union is the 
sum of the degrees of /i(rc), • • • ,f P (x) which by 2.1 is the dimension of 

a. Thus a = 9Hi U 9H 2 U • • • U 9n v . 

We note that this theorem is not true for even n. 

Let do , 0i , • • • , d t -\ be the set of primitive idempotents of (R n . 
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Corollary 2.13: 
(i) Ofdj = i 9* j. 
(ii ) Every idem-potent of (R„ is of the form 



;-i 



a 



t=0 

where e,- belongs to V. In particular, 

<=i 

2>,= i. 

Proof: 
(i) Follows from 2.12 (ii) and 2.11 (i). 

(ii) Since any ideal in (R„ is the union of minimal ideals, any idem- 
potent can be obtained from the 0,- by repeated applications of 2.11 (ii). 
The product terms disappear by part (i) of this lemma. In particular 



ffU-1 = (Rn- (£**)■ 



Lemma 2.14:* If Mi , M2 belong to the minimal ideal 9TC, and m^ = 0, 
J/ien ei7/ier m = or n 2 = 0. 

Proof: Suppose that /z 2 ^ 0. Consider the set A of elements m in ?ITT 
such that m/x2 = 0. If mi , W2 « A, so does mi + ra 2 ; if m e A and ju e (R„ , 
then nm e A. Hence A is a subideal of 3TZ, so is either all of 2(11 or the zero 
ideal. Let 6 be the idempotent of 3TC; then 6-n 2 = M2 t* 0; hence c A, 
and A ;* 911. We must then have A = 0; consequently mi = 0. 

It is clear that it will be advantageous to find the explicit forms of the 
primitive idempotents 0,(.t). Indeed if this were not easy the above 
theoretical results would have little practical value; however it is easy, 
and has in fact been done for all odd values of n through 1023. The 
method used is due to Prange, and is described below. 

Let r = ri , r 2 , • • ■ , r m be a cycle of S 2 (n) and let rjr denote the 
polynomial x r} + x r * + • • • + x'" r} r is an idempotent, since squaring 
it simply rearranges the numbers which occur as exponents of x. 

Lemma 2.14: The polynomial 

n-\ 

Yj of*?, a, e V, 

7=0 

is an idempotent if and only if it can be written as a sum of the rj r . 



* Alternatively we might quote the well known theorem 4 ' 6 that the minimal 
ideal 3TC is isomorphic to the Galois field V[y]/f(y). 
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Proof: Clearly any sum of the y\ r is idempotent. The "if" part of the 
lemma follows immediately from 2.2. 

Lemma 2.15: The number of primitive idempotents of (Rn is the same as 
the number of cycles of S 2 (n). 

Proof: Let s be the number of primitive idempotents. By 2.12 (Hi) 
the number of ideals in (R n is 2 s . Hence s is the number of cycles 2 2 (n). 

Any idempotent may be expressed as a linear combination of the rjr 
(which we can find easily) or as a linear combination of the primitive 
idempotents 6j . The 6j have the additional property that they are 
mutually orthogonal. In particular, each ij r is the sum of a subset of the 
Oj ; the problem is to split it into its components. 

We observe that if S, T are nonempty subsets of the indices 0, 
1, • • • , t - 1, S ^ T, then 






\jts J \uT / j.snr 



The product of two idempotents will contain fewer primitive idempo- 
tents than either factor. 

Let t be the number of primitive idempotents. Then 
t—i t— i 

1 = 2> y , and if 1 = 2 S; 

j=0 j=0 

where the i-y are orthogonal idempotents, then the £_,- are, except possibly 
in order, the same as the 6, . We use this fact to set up an algorithm as 
follows: 

Suppose that we have at some stage a decomposition of 1 into t < t 
mutually orthogonal idempotents; 

1 = Z 6i . */ = 1. && = ° ** J- 

Let | be an idempotent; set 

£; = U + fc(l + k) = in + ««; = 0, 1, • • •, r - 1. 

£n > &2 are idempotent, and the new idempotents are mutually orthog- 
onal. If the splitting is genuine (it may happen that £; = £ or £,■ = 
1 + £, in which case no splitting takes places) the result is a decomposi- 
tion of 1 into more than r mutually orthogonal idempotents. 

To start the algorithm we set 1 = rti + (1 + j?i); the other ijy provide 
successive candidates for £. The computation is finished when there are 
t components in the decomposition of 1. Since the r\ T are also a base for 
the idempotents of (R„ , this stage must be reached by the time the set 
of 77,. is exhausted. 
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The primitive idempotent 0,(x) is the generating idempotent of a 
minimal ideal 9TZ,- ; the orthogonal idempotent 1 + 9i(x) is the generating 
idempotent of a maximal ideal JC, : the generating f actor /,- (x ) of 3C» is 
an irreducible factor of x n — 1, and is the greatest common factor of 
1 + di(x) and x" — 1. In this way we can produce the parallel lists of 
primitive idempotents and irreducible factors of x n — 1 referred to in 
Section I. 

We return now to the automorphisms a q of (R„ . 

The set of automorphisms a q is an Abelian group, with <r qi a q2 = a qiQ2 
defined in the usual way. It is isomorphic to the (multiplicative) group 
of integers mod n which are prime to n. Since o- 2 and its powers leave 
the idempotents of (R„ unchanged, we may, for our purposes, factor 
out this subgroup. In practice we choose one q from each cycle of 2 2 (n) 
which contains integers prime to n. These q (and the associated <r q ) 
form a rather small Abelian group, whose structure may be found by 
hand, as illustrated for n = 63. It is worthwhile to find a set of generators 
for the group. One need only compute the effect of these generators on 
the set of primitive idempotents of (R„ ; it is then simple to calculate the 
effect of any automorphism on any ideal. Proposition VI is now estab- 
lished. 

Proof of Proposition VII: Lct/i(.r) be the irreducible factor of x n — 1 
associated with the cycle (1, 2, • • • , 2"'~ ). v is an integer prime to n, 
and we wish to identify the polynomial / r (.r) associated with the cycle 
(v, 2v, • • • , 2 m ~ l v). Since v is prime to n the two cycles will be the same 
length. fi(x) is the highest common factor of 1 + di(x) and x n — 1. 
1 + 0i (x) is thus divisible by the polynomial (x — f ) (x — f ) • • • 
(x — f 2m ). Let u, prime to n, be such that uv = \ mod n. Then (1 + 
6\{x))o u = 1 + 0i (x") is divisible by 

(.r"-.f)(.r"-f 2 ) ••• (.r"-f 2 '") 

= (a'-rx^-i*") ••• (*" -r 2mu "), 

which is divisible by (a; — f")(x — j ) • • ■ (x — £ "). 

Thus f r (x) divides (1 + 6\{x))tr u over F(2 m ), and since both poly- 
nomials have coefficients in V, f r (x) divides (1 + 6\(x))a u over V. 
Hence f r (x) is the highest common factor of (1 -f- di(x))<r u and x" + 1. 

Spectra of Cyclic Alphabets 

Let a(x), b(x) be the generating factor and reciprocal factor of an 
ideal ft in (R„ . Let b(x) belong to exponent e, where n = ea, a > 1. 
Let Q, be the ideal in (R f with reciprocal polynomial b(x). 

* (R, \8 the ring of polynomials mod x' — 1. 
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Lemma 2.16: Every letter of a consists of a repetitions of a letter of a'. 
Proof: Let a (x) = (x e — l)/b(x) be the generating polynomial of 
a'. Then 

a(x) = (x n - l)/b(x) = ^£i -a'(x). 

= (tx n - ie )a(x). 

Let r(x)a'(x) = £"-<» a&t (multiplication in (R e ) be a letter of o! '. 
With multiplication in (R n , a contains 

r(x)a(x) = (§ *""*') (§«**')■ 

Hence each letter of a' gives rise to a letter of a, which consists of a 
repetitions of the letter of a'. It is evident that different letters of o! 
give rise to different letters of a. Since the dimensions of a and a are 
both equal to the degree of b(x), all of a is obtained in this way. 

Corollary 2.17: Let the spectrum of o! he A' (i) i = 0, • • • , e. The 
spectrum of Q, is given by the equations A (ai) = A (i), i = 0, ■ • • , e. 

For example, let n = 15, and b(x) = 1 + x + a; 2 . b(x) has exponent 3; 
a(x) = (x 3 + l)/b(x) = 1 + x; a(x) = (1 + x s + x« + x 9 + .-c 12 ) 
(1 + a;). The ideals a', a are tabulated below. 
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Let T denote the cycle permutation w — > co + 1 (mod n) of the num- 
bers 0,1, • •■ , n - 1. T shall also denote the mapping h(x) — > xh(x) 
(exponents mod n) of (R„ onto itself. Clearly T" is the identity mapping. 
If a e a, the polynomials (or vectors) aT, aT 2 , ■ • • , aT"' 1 also belong 
to a. The letters of a are divided into a number of nonoverlapping cycles; 
to construct a we need to know only one element from each cycle. 

In fact it would seldom be useful to construct a picture of a in this 
way. We restrict ourselves to finding the spectrum of a. 

The set a, aT, • • • , aT 7 " -1 does not always contain n different letters. 
We denote by 7r(a) the number of different letters in this set; ir{a) is 
called the period of a. The set 

rrpr(a)— 1 
, • ■ • , Ctl 

is then a complete cycle of a, and the length of the cycle is t (a ) . 
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Let r(x) e (R„ ; let a(x) be the highest common factor of r(x) and 
x" — 1, and let b(x) = (x n — l)/a(x). 

Lemma 2.18: The period of r(x) is the exponent of b(x). 

Proof: Suppose b(x) belongs to exponent e; set a (x) — [(x e — 1)/ 
b(x)], r(x) = h(x)a(x), where h(x) is relatively prime to x n — 1. 
r(x)(x- 1) = h(x)-a(x)-b(x)a'(x) = h(x)a(x)(x n - 1) = 0. 
Hence x"r(x) = r(x), and the period of r(x) is ^ e. 

Suppose that e is the period of r (x ) . Then e ^ n, and r (x )(x e — 1 ) = 
0; in V[x], h(x)a(x)(x e ' — 1) = i(x)(x n — 1) = i(x)a(x)b(x) where 
i(x) is a polynomial in V[x]. b(x) and h(x) are relatively prime since 
b(x) is a factor of x" — 1. Thus b(x) divides (x e — 1), and e ^ e. 

Proof of Proposition IX: x(0,) is the period of 0, , and x(m) the 
period of m e (R„- 0i . Then mx" {6i) = w0,-.r T(9l) = w0, = m; hence 7r(m) ^ 
T(fl.-). AlsoO = m- (x* (m) + 1) = m0,- (x r(m) + 1) = mfl t -^(a;' lm) + 1). 
By 2.13, since mdi ^ 0, we must have di(x' {m) + 1) = 0. Thus »(**) ^ 
x(w), so that 7r(0 t ) = 7r(?n). By 2.18, 7r(0 t ) is the exponent of the 
irreducible polynomial /,• (x ) . 

If n = 2'" — 1, an irreducible polynomial /(.t) of exponent n has de- 
gree m, and a minimal ideal of period n contains just one cycle besides 
the zero cycle. The maximal ideal with generating factor f(x) is a 
Hamming code (a close-packed code of minimum distance 3). If n is 
not of this form, the minimal ideals of period n contain more than one 
cycle; it is then necessary to find several cycle representatives. No short- 
cut for doing this has been developed; the particular cases which have 
been studied have been solved by brute force. 

If we have found a cycle representative for each cycle of (R0,- and (R0y , 
we can construct cycle representatives for (R(0,- + 0/) with the help of 
the following lemmas. 

Let m e (R0 t - , n e (R0> . 

Lemma 2.19: mT + nT = nT"' + nT"' if and only if mT" = mT"' 
andnT" = nT" '. 

Proof: The equation above may be written 

m r - mT' = nT" - nT"' . 

The left-hand side belongs to (R0,- and the right-hand side to 6idj . The 
intersection of these ideals is zero. 

Let 7r(m), ir(n) be the periods of m, n. Let H, h be respectively the 
least common multiple and highest common factor of these numbers. 

Lemma 2.20: (Proof of Proposition X): The ir(m)-T(n) elements 
mT 1 ' + nT" are partitioned into h cycles of period H. The vectors mT* 1 -f- n, 
H = 0, 1, • • • , h — 1 are in different cycles, and may be taken as cycle 
representatives. 
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Proof: Let X be the period of the vector mT" + nT '. Then 

(mf + nT) T x = mT" + nT, 

and by 2.19 v -\- X = v mod ir(m) and p. + X = p. mod 7r(w). Thus X is 
divisible by both ir(m) and ir(n) and X = qH, q an integer ^ 1. 
mT" + w and mT"' + n are in the same cycle if and only if 

(mf + n)T" = mT"' + n, 

or p. -\- p = p! mod x(m) and /> = mod ir(n). p and w(m) are both 
divisible by h; hence p — // = p mod 7r (m) implies that p, — n is divisible 
by fc. The h vectors mT" -\- n, p. = 0, 1, • • • , h — 1 must be in different 
cycles. 

Thus there are at least h different cycles, and the period of each is 
^ H. Since there are only ir(m)7r(w) = hH elements altogether, the 
only possibility is that there are h cycles of period H. 

We now return to Proposition V, which was omitted earlier. We restate 
the proposition as follows : 

Theorem 2.21: Let 9Hi , 9TC 2 he minimal ideals of <R„ . The following three 
statements are equivalent: 

(i) 3Tli , 9TI2 have tfie same spectrum, 
(ii) 9TCi , 9TC2 have the same dimension and period. 

{Hi) There exists an automorphism a q of (R n such that 2fHio- g = 31Z 2 . 

Proof: We show that (*') => (ii) =» (in) => (i). 

Let A(s) be the number of letters of weight s in 3Tli . We prove that 
the period of EM,- is the highest common factor of A(s), s > 0. 

Suppose first that the period of 911. is n; let 2 h< be the total number 
of letters in 3Hi . The orthogonal complement of arc,- can contain no 
letters of weight 1 since it is a nontrivial cyclic alphabet. By Proposition 
VIII we obtain 

£,A(s) = 2 ki - 1 



2 sA (s) = 2 ki ~ l 



n. 



By the first equation, ki = k 2 , so the dimensions of 9TCi and 3TC 2 are 
equal. Since every cycle of 311,- , except that containing the zero letter, 
is of length n, n divides each A (s) for s > 0. By the second equation, 
any other common factor of A (s) is a power of 2. By the first equation, 
there can be no such factor. 

Suppose now that the period of 3TCi is e* , and n/e, = a; > 1. By 2.16 
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and 2.17 there is a minimal ideal 3Il/ in (Re,, with period e,- and spectrum 
A' (s) such that the spectrum of 9TC,- is given by A (ens) = A' (s). By the 
first part of the proof, e,- is the highest common factor of A (s), s > 0; 
hence e,- is the highest common factor of A (ctis), a,s > 0. 

(ii) =$ (Hi). Suppose first that the period of 3TCi and 3TC 2 is n. Let 3Ri 
correspond to the cycle (1,2, • • • , 2" ,_1 ) of 2 2 (n), and 3TC 2 correspond to 
the cycle (v, 2v, • ■ • , 2 m ~ l v). v must be prime to n, since the irreducible 
polynomial associated with 9Tl 2 has exponent n. Choose u, prime to n so 
that uv = 1 mod n. As in the proof of Proposition VII, 3TCio-„ = 9TC 2 . 

Suppose now that 911, has exponent e, i = 1, 2, where n/e = r > 1. 
Let3Tli,9Tl 2 be associated with cycles (r, 2r, ••• , 2 m "V) and 
(s, 2s, • • • , 2 m -1 s). The lengths of these cycles are the same because 
3TCi and 3TC 2 have the same dimension. 

As in the proof of Lemma 2.5, s = qr, where q is prime to w. Applying 
again the proof of Proposition VII, we see that 9TCio- g = 91Z 2 

(Hi) => (i). If 9ft! and 3TC 2 are equivalent they clearly have the same 
spectrum. 

We have thus shown that minimal and maximal cyclic alphabets of 
(Sin which have the same spectrum are equivalent. It is not known 
whether this is true for other cyclic alphabets. However many cases 
have been found of cyclic alphabets which have the same spectrum but 
which are definitely not related by one of the automorphism a q . 

CONCLUSION 

Up to this time much of the theoretical work on binary cyclic alpha- 
bets has been concentrated on alphabets with block lengths of the form 
n = 2 m — \. Such numbers become rather sparse as n increases. On the 
other hand, alphabets of long block length are important for actual use 
on the telephone network, and for such applications the block length, 
though large, is likely to be restricted to a narrow range. It is therefore 
expedient to develop economical procedures which will pick out the alpha- 
bets with preassigned properties if any such exist. The amount of in- 
formation presented in this paper about the structure of the polynomial 
ring (R„ is no doubt formidable; it has, however, very practical applica- 
tions. 
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